Hey, I have an issue with my permissions, would love to get some help if you spot a bug, tried almost everything 😄 My schema looks like this:

type TicketScan @model {
  id: ID! @isUnique
  createdAt: DateTime!
  updatedAt: DateTime!

  ticket: Ticket! @relation(name: "TicketScanOnTicket")
  event: ModeratedEvent! @relation(name: "ModeratedEventScanedTicket")
}

type ModeratedEvent @model {
  id: ID! @isUnique
  createdAt: DateTime!
  updatedAt: DateTime!

  user: User! @relation(name: "UserModeratedEvent")
  event: Event! @relation(name: "EventModerator")
  scannedTickets: [TicketScan!]! @relation(name: "ModeratedEventScanedTicket")
}

type Event @model {
  id: ID! @isUnique
  createdAt: DateTime!
  updatedAt: DateTime!

  name: String!
  description: String!
  speaker: String!
  period: Int!
  location: String!
  numberOfAvailableTickets: Int!

  thumbnail: String!
  picture: String!

  tickets: [Ticket!]! @relation(name: "EventTicket")
  moderators: [ModeratedEvent!]! @relation(name: "EventModerator")
  admins: [AdministeredEvent!]! @relation(name: "EventAdministrator")
}

type Ticket @model {
  id: ID! @isUnique
  createdAt: DateTime!
  updatedAt: DateTime!

  event: Event! @relation(name: "EventTicket")
  attendee: Customer! @relation(name: "EventAttendee")

  bill: [TicketBill!]! @relation(name: "TicketBillOnTicket")
  scan: TicketScan @relation(name: "TicketScanOnTicket")
}

type User @model {
  id: ID! @isUnique
  createdAt: DateTime!
  updatedAt: DateTime!

  email: String! @isUnique
  password: String!

  role: UserRole @defaultValue(value: BLOCKED)

  administeredEvents: [AdministeredEvent!]! @relation(name: "UserAdministeredEvent")
  moderatedEvents: [ModeratedEvent!]! @relation(name: "UserModeratedEvent")
}

Permissions :

- operation: TicketScan.create
    authenticated: true
    query: permissions/scan.graphql

query permitScan($user_id: ID!, $input_eventId: ID!, $input_ticketId: ID!) {
   SomeModeratedEventExists(filter: {
      id: $input_eventId,
      user: {
         id: $user_id
      },
      event: {
         tickets_some: {
            id: $input_ticketId,
            scan: null
         }
      }
  })
}

Works if this permission is set to allow all, and I also can find an event matching the fields in

Permissions tester

.

@matic are you missing the reference to permitScan in your graphcool.yml?

- operation: TicketScan.create
    authenticated: true
    query: permissions/scan.graphql:permitScan

@max hope this works 🤞skin tone 2

Let me know if it works. I thought you had moved to graphql-yoga + prisma?

@max it didn’t, couldn’t find the solution. Thanks anyway! I am trying to migrate old projects to Prisma, but some still need maintenance and I still like the ease of use of Framework 😄